ZSCV012 Physical Penetration Testing (Non-Award)

This comprehensive course provides hands-on training in physical penetration testing techniques used by security professionals to assess and improve organisational security. Participants learn to identify vulnerabilities in physical security systems through authorised testing methods.

Topics include HID-based attacks using Rubber Ducky and OMG cable, RF security and credential cloning, technical surveillance countermeasures (bug sweeping), lock picking and bypass techniques, and professional security assessment and reporting.

The course also covers social engineering techniques including pretexting, tailgating, and impersonation, enabling participants to assess human factors in physical security.

All activities are framed within lawful, ethical engagement rules with strong emphasis on authorised testing only.

Learning Focus:

Knowledge: 

• Physical penetration testing lifecycle, scoping, and rules of engagement
• Legal, ethical, and safety considerations for physical testing activities
• HID-based attacks, keystroke injection, and Ducky Script syntax
• RF technologies in access control (LF/HF RFID, NFC, key fobs /faraday protection)
• Technical surveillance countermeasures and bug detection principles
• Lock mechanisms, bypass techniques, and non-destructive entry principles
• Physical security assessment frameworks and professional pen-test reporting
• Social engineering tactics and psychological principles used in physical penetration testing
• Pretexting, tailgating, and impersonation techniques within ethical and legal boundaries

Skills: 

• Write and deploy Ducky Script payloads for authorised testing
• Perform RF credential assessment using appropriate tools
• Conduct structured bug sweeps and document findings
• Apply basic lock picking and bypass techniques on training equipment
• Conduct physical security walkthroughs using assessment checklists
• Draft professional security assessment reports with actionable recommendations
• Propose appropriate mitigations and security improvements
• Develop and execute social engineering pretexts for authorised security assessments
• Identify social engineering vulnerabilities and recommend security awareness measures